Jellyfin doesn’t even have write access to my files. If they can get access into the container’s process then I guess they could add stuff to the web interface which could contain bad stuff.

All good until Mr Resetti shows up to scold you.

I’ve always assumed it depends on what your context is. If your perspective is the country that the immigrant is from, then they would be an expat. If you are in context of the other country they are an immigrant.

Ie

“My friend is an expat who went off to The Netherlands.” “My friend is an immigrant that came here from The USA.”

If they don’t, that’s something you can’t blame on a new start.

Pretty much, add the new domain to certbot, then create a new server directive with the new name and certificate paths. I would probably just copy and paste the existing one for your current domain, then just change the domain. SNI will then select the right certificate for you.

You can set certbot to create a single certificate with both domains, but tbh the above is just simpler to setup and maintain.

Not sure about navidrome, but if it supports upnp, you could setup a bubbleupnp server to bridge the two.